Sh1n0g1 / z9
PowerShell Script Analyzer
☆68Updated last year
Alternatives and similar repositories for z9:
Users that are interested in z9 are comparing it to the libraries listed below
- yara detection rules for hunting with the threathunting-keywords project☆106Updated last week
- ShellSweeping the evil.☆163Updated 3 months ago
- ☆32Updated 11 months ago
- ☆66Updated 2 years ago
- ☆80Updated 3 months ago
- ☆37Updated 11 months ago
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- Active C&C Detector☆152Updated last year
- Contains compiled binaries of Volatility☆33Updated last month
- A full analysis report detailing as much as possible of a Malware or a Threat☆27Updated 8 months ago
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆147Updated 5 months ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated last year
- MS Graph Commands and Tools for Blue Teamers☆49Updated last year
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆118Updated 11 months ago
- A collection of tools and detections for the Sliver C2 Frameworj☆116Updated last year
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 3 months ago
- information about ransomware groups (Ransomware Analysis Notes)☆36Updated last year
- Yara Rules for Modern Malware☆73Updated last year
- Some of my rough notes for Docker threat detection☆47Updated last year
- C2 Active Scanner☆52Updated 8 months ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆51Updated last year
- A simple tool designed to create Atomic Red Team tests with ease.☆37Updated this week
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆120Updated last month
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆81Updated 10 months ago
- Open IOC sharing platform☆55Updated 4 months ago
- Configuration Extractors for Malware☆91Updated last month
- CarbonBlack EDR detection rules and response actions☆71Updated 6 months ago
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆71Updated last month
- Simulation of Akira Ransomware with Invoke-AtomicTest☆14Updated 8 months ago